#ringrtc

0 stories this week · 6 this month · 6 in 6 months · mostly security

Stories per day · 30 days

6 stories, newest first · one card per story

A remote peer can flood the call state machine so the microphone and possibly the camera stay on.

CVE-2026-113380, scored CVSS 4.0 9.3, lets a call peer delay teardown so audio and possibly video continue; no in-the-wild use is known.

A call participant can flood RingRTC’s event queue so hang-up fails; CVSS 9.3, with no known exploitation.

GBHackers8d agohigh

CVE-2026-113380, scored CVSS 9.3, lets a call participant fill a 256-entry queue and block teardown.

CVE-2026-113380, CVSS 9.3, affects RingRTC before 2.72.0; a conceptual proof of concept exists and CISA KEV does not list it.

RingRTC versions before 2.72.0 could let participants hear audio after call end; no exploitation reported.

Stories tagged #ringrtc